Senior Director, Chief Privacy Lead

About this role

Corporate At ZOLL, we're passionate about improving patient outcomes and helping save lives. We provide innovative technologies that make a meaningful difference in people's lives. Our medical devices, software and related services are used worldwide to diagnose and treat patients suffering from serious cardiopulmonary and respiratory conditions.

Job Summary The Senior Director, Chief Privacy Lead (CPL) serves as the enterprise leader responsible for the strategic direction, governance, and operational execution of ZOLL Medical Corporation's global privacy program. This role provides vision and leadership across all aspects of data privacy, information governance, and data protection compliance in support of the company's mission to advance innovative medical technologies and digital health solutions in a highly regulated global healthcare environment. The CPL plays a critical role in safeguarding patient, customer, employee, clinical, and business data while enabling innovation, digital transformation, product development, and global commercial growth. This leader partners closely with senior executives and cross-functional stakeholders across Legal, Regulatory Affairs, IT, Cybersecurity, R&D, Clinical, Quality, Commercial, Human Resources, and Operations to embed privacy-by-design and data protection principles into products, software-enabled medical technologies, connected devices, business processes, and enterprise systems. The CPL is responsible for leading and continuously evolving a comprehensive global privacy governance framework to ensure compliance with international, federal, and state privacy and data protection laws and regulations, including GDPR, HIPAA, consumer health privacy laws, cross-border data transfer requirements, and emerging digital health and AI-related regulatory frameworks. This highly visible leadership role oversees privacy risk management, incident response coordination, privacy impact assessments, regulatory engagement, training, monitoring, and operational compliance activities across the enterprise. As a trusted advisor to executive leadership, the CPL provides strategic guidance on privacy, data ethics, and emerging technology risks impacting the organization's global operations, reputation, and long-term business objectives within the evolving MedTech landscape.

Essential Functions • Set and execute the global enterprise-wide privacy strategy, policies, and governance framework for ZOLL Medical Corporation.

• Ensure compliance with global privacy, data protection, and cybersecurity laws and regulations (including, for example, GDPR, U.S. state privacy laws, digital product standards and regulations, and other applicable international requirements).

• Serve as the primary leader for privacy risk management, including oversight of privacy impact assessments and mitigation plans.

• Partner with Legal, Compliance, R&D, Cybersecurity, and Technology teams to integrate privacy-by-design and privacy-by-default principles into systems, products, and digital initiatives.

• Monitor new and proposed privacy laws and regulations and provide strategic guidance to senior leaders on privacy risks, trends, and regulatory developments.

• Lead and develop a global privacy organization, including talent development and succession planning, to operationalize privacy requirements and promote a strong culture of privacy and data protection.

• Oversee privacy contracting practices to ensure compliance with applicable laws, guidelines, and best practices.

• Direct the development and implementation of a company-wide privacy training program, including the designation and training of privacy stewards within relevant functions.

• In partnership with Global Security, oversee privacy incident response and investigations, and support regulatory interactions as needed.

• In collaboration with Division leads, develop and maintain trusted relationships with data protection commissioners and government enforcement agencies, and execute a strategy to influence evolving privacy laws affecting the company.

Required/Preferred Education and Experience • JD from the United States or a European jurisdiction required

• Advanced degree in Privacy, Information Governance, Cybersecurity, Healthcare Administration, Public Policy, or related field preferred

• Degree in Information Systems, Master of Business Administration, or Master of Public Policy preferred

• 10+ years of progressive experience in privacy, data protection, cybersecurity, or related risk functions, including experience in private practice or within a complex global organization in the healthcare field (e.g., hospital system, medical device or MedTech company, or pharmaceutical industry) required

• Experience advising senior executives on privacy strategy and enterprise risk required

• Prior experience supporting or managing a data incident management and response process, including data subject and regulatory enforcement agency notifications preferred

• Background partnering with information systems, cybersecurity, and digital technology teams preferred

• Experience supporting business transformation or operating model changes preferred

• Certifications such as CIPP, CIPM, or equivalent Preferred

Knowledge, Skills and Abilities • Demonstrated expertise in interpreting and applying global privacy regulations in a regulated industry, including GDPR, U.S. federal and state privacy laws, HIPAA, and relevant FDCA regulations.

• Demonstrated ability to build, operationalize, and improve processes and high-performing teams.

• Proven ability to lead global, cross-functional teams and influence without direct authority.

• Strong strategic thinking, judgment, and decision-making capabilities.

• Language: Fluency in English required; additional languages are a plus.

Travel Requirements • Up to 20%, domestic and international

Physical Demands The physical demands described here are representative of those that m

Similar jobs

• Senior Director Assistant General Counsel, Privacy — Regeneron · SLEEPY HOLLOW | Cambridge
• Director, Privacy Counsel — Omadahealth · Remote
• Senior Manager, Privacy Engineering — Upstart · Remote
• Senior Counsel, Privacy and Regulatory — Fastly · New York City, NY; San Francisco, CA
• Director, Corporate Counsel - Privacy — Okta · Remote
• Head of Privacy & Security — Playlab · Remote
• Head of Privacy — Abridge · SF Office
• Sr. Counsel, Privacy Compliance — Databricks · Bellevue, Washington; Boston, Massachusetts; Chicago, Illinois; Denver, Colorado; Seattle, Washington; Washington, D.C.